Version 1.0Effective : October 16, 2026

Privacy Policy

Plain Language Summary

We operate this academy with straightforward principles: your study data belongs to you, AI API keys remain encrypted with AES-256-GCM in isolated tenant vaults, and we never spam your inbox with marketing or reminder emails.

Security & Audit Notice:

Administrative operations are protected by sudo re-authentication and recorded in an immutable audit ledger. Staff cannot read private message bodies without triggering a logged security event.

# Privacy Policy

Last Updated: October 2026

Otso Teach takes student privacy and data sovereignty seriously. This Privacy Policy details how we collect, store, and safeguard your personal and academic information.

1. Information We Collect - Account Identity: Email address, display name, and securely hashed passwords (Argon2id). - Academic Progress: Goal specifications, conversation turn history, daily study task completions, and weekly examination submissions. - BYOK Credentials: Third-party API keys provided by the user, strictly encrypted at rest via AES-256-GCM.

2. Data Honesty & Zero Fabrication In adherence to our core operating principles, Otso Teach never fabricates study streaks, scores, or activity metrics. All analytics reflect genuine learner activity.

3. Zero Third-Party Broker Sharing We do not sell, rent, or lease your study records or personal identifiable information to third-party data brokers or advertisers.

4. Security Architecture All communication between client and backend is encrypted via TLS. Passwords, secrets, and session tokens adhere to strict security invariants.

Statutory Document · Otso Teach